diff --git a/README.md b/README.md
index dbdae4b..9f7cfb7 100644
--- a/README.md
+++ b/README.md
@@ -1,1260 +1,139 @@
-# agent-browser
+# agent-browser-stealth
 
-Stealth-first browser automation CLI engineered for anti-bot evasion. Fast Rust CLI with Node.js fallback.
+Stealth-focused fork of `agent-browser` for anti-bot evasion in production automation.
 
-Designed for production automation on detection-heavy sites:
-- Always-on stealth (no opt-in flag)
-- Browser and protocol-level anti-fingerprint patches
-- Humanized interaction behavior by default
-- Verified against CreepJS using the built-in check script
+This fork keeps core browser automation capabilities in sync with upstream `agent-browser`, and focuses its own changes on stealth and anti-detection behavior.
+
+## Positioning
+
+- Core commands and workflows: aligned with upstream `agent-browser`
+- Fork value: stronger anti-bot defaults and operational policies
+- Default mindset: no extra stealth toggle, stealth is always on
 
 ## Installation
 
-### Global Installation (recommended)
-
-Installs the native Rust binary for maximum performance:
+### Global (recommended)
 
 ```bash
 npm install -g agent-browser-stealth
-agent-browser install  # Download Chromium
+agent-browser install
 ```
 
-This is the fastest option -- commands run through the native Rust CLI directly with sub-millisecond parsing overhead.
-
-### Quick Start (no install)
-
-Run directly with `npx` if you want to try it without installing globally:
+### Quick try with npx
 
 ```bash
-npx agent-browser-stealth install   # Download Chromium (first time only)
-npx agent-browser-stealth open example.com
-```
-
-> **Note:** `npx` routes through Node.js before reaching the Rust CLI, so it is noticeably slower than a global install. For regular use, install globally.
-
-### Project Installation (local dependency)
-
-For projects that want to pin the version in `package.json`:
-
-```bash
-npm install agent-browser-stealth
 npx agent-browser-stealth install
-```
-
-Then use via `npx` or `package.json` scripts:
-
-```bash
 npx agent-browser-stealth open example.com
 ```
 
-### Homebrew (macOS)
-
-```bash
-brew install agent-browser
-agent-browser install  # Download Chromium
-```
-
-### From Source
+### From source
 
 ```bash
 git clone https://github.com/leeguooooo/agent-browser
 cd agent-browser
 pnpm install
 pnpm build
-pnpm build:native   # Requires Rust (https://rustup.rs)
-pnpm link --global  # Makes agent-browser available globally
+pnpm build:native
+pnpm link --global
 agent-browser install
 ```
 
-### Fork Maintenance (Independent Release + Upstream Sync)
-
-If you maintain a fork and publish your own CLI, use this workflow:
-
-1. Keep an upstream-tracking branch (`upstream-main`) for clean sync history.
-2. Keep your release branch (`main`) for production-ready code only.
-3. Merge upstream into short-lived sync branches, then open PRs into `main`.
-
-One-time setup:
-
-```bash
-git remote add upstream https://github.com/vercel-labs/agent-browser.git
-git fetch upstream
-```
-
-Regular sync:
-
-```bash
-pnpm run sync:upstream:push
-```
-
-This command:
-- Fetches `upstream/main`
-- Fast-forwards local `upstream-main`
-- Creates `sync/YYYY-MM-DD` from local `main`
-- Merges `upstream-main` into the sync branch
-- Pushes the sync branch to `origin` (with `sync:upstream:push`)
-
-If merge conflicts occur, resolve them on the sync branch and open a PR as usual.
-
-Independent release checklist for forks:
-- Use your own npm package name and CLI binary name (avoid conflicts with upstream package ownership).
-- Update `repository`, `bugs`, and `homepage` in `package.json` to your fork.
-- Configure npm Trusted Publishing (OIDC) for your package and repository workflow.
-- Keep release tags and changelog in your own namespace/versioning policy.
-- Use dual-version format: `<upstream>-fork.<fork>` (example: `0.14.0-fork.1`).
-- `agent-browser --version` should show all three: full version, upstream version, and fork version.
-
-### Linux Dependencies
-
-On Linux, install system dependencies:
-
-```bash
-agent-browser install --with-deps
-# or manually: npx playwright install-deps chromium
-```
-
 ## Quick Start
 
 ```bash
-agent-browser open example.com
-agent-browser snapshot                    # Get accessibility tree with refs
-agent-browser click @e2                   # Click by ref from snapshot
-agent-browser fill @e3 "test@example.com" # Fill by ref
-agent-browser get text @e1                # Get text by ref
+agent-browser open https://example.com
+agent-browser snapshot -i
+agent-browser click @e2
+agent-browser fill @e3 "test@example.com"
 agent-browser screenshot page.png
-agent-browser --version                   # Includes upstream/fork metadata on fork builds
-agent-browser close
 ```
 
-### Traditional Selectors (also supported)
+## Anti-Bot Measures
 
-```bash
-agent-browser click "#submit"
-agent-browser fill "#email" "test@example.com"
-agent-browser find role button click --name "Submit"
-```
+Stealth is always enabled. Legacy `launch.stealth` is accepted only for compatibility and ignored.
 
-## Commands
+### 1) Fingerprint hardening
 
-### Core Commands
+- Hides automation indicators such as `navigator.webdriver`
+- Adds Chromium launch args to reduce automation fingerprints
+- Rewrites headless UA markers (`HeadlessChrome`)
+- Patches high-signal surfaces such as:
+  - `navigator.plugins` / `navigator.mimeTypes`
+  - `window.chrome.runtime`
+  - WebGL vendor/renderer exposure
+  - permissions/language/media/device related probes
+- Applies both context init scripts and CDP-level UA overrides
+- Preserves explicit custom UA from `--user-agent` or `launch({ userAgent })`
 
-```bash
-agent-browser open <url>              # Navigate to URL (aliases: goto, navigate)
-agent-browser click <sel>             # Click element (--new-tab to open in new tab)
-agent-browser dblclick <sel>          # Double-click element
-agent-browser focus <sel>             # Focus element
-agent-browser type <sel> <text> [--delay <ms>]  # Type into element
-agent-browser fill <sel> <text>       # Clear and fill
-agent-browser press <key>             # Press key (Enter, Tab, Control+a) (alias: key)
-agent-browser keyboard type <text> [--delay <ms>]  # Type with real keystrokes (no selector, current focus)
-agent-browser keyboard inserttext <text>  # Insert text without key events (no selector)
-agent-browser keydown <key>           # Hold key down
-agent-browser keyup <key>             # Release key
-agent-browser hover <sel>             # Hover element
-agent-browser select <sel> <val>      # Select dropdown option
-agent-browser check <sel>             # Check checkbox
-agent-browser uncheck <sel>           # Uncheck checkbox
-agent-browser scroll <dir> [px]       # Scroll (up/down/left/right)
-agent-browser scrollintoview <sel>    # Scroll element into view (alias: scrollinto)
-agent-browser drag <src> <tgt>        # Drag and drop
-agent-browser upload <sel> <files>    # Upload files
-agent-browser screenshot [path]       # Take screenshot (--full for full page, saves to a temporary directory if no path)
-agent-browser screenshot --annotate   # Annotated screenshot with numbered element labels
-agent-browser pdf <path>              # Save as PDF
-agent-browser snapshot                # Accessibility tree with refs (best for AI)
-agent-browser eval <js>               # Run JavaScript (-b for base64, --stdin for piped input)
-agent-browser connect <port>          # Connect to browser via CDP
-agent-browser close                   # Close browser (aliases: quit, exit)
-```
+### 2) Behavioral humanization
 
-### Typing Delay And Literal Text
+- Randomized typing cadence when `--delay` is used
+- Random wait ranges (`wait 2000-5000`)
+- Bezier-curve mouse movement before click actions
+- Randomized navigation pacing
 
-Use `--delay` as a real CLI option (outside the text argument):
+### 3) Region signal alignment
+
+- Auto-aligns locale/timezone/Accept-Language by target TLD
+- Reduces locale-timezone mismatch risk on region-sensitive sites
+
+### 4) Verification-aware retry
+
+- Detects common captcha/verification interstitial patterns
+- Retries navigation with randomized backoff when triggered
+
+## Typing `--delay` Correctly
+
+Use `--delay` as an option:
 
 ```bash
 agent-browser type @e2 "iphone" --delay 120
 agent-browser keyboard type "iphone" --delay 120
 ```
 
-If your literal text must include `--delay`, stop option parsing with `--`:
+If literal text includes `--delay`, stop option parsing with `--`:
 
 ```bash
 agent-browser type @e2 -- "--delay 120"
 agent-browser keyboard type -- "--delay 120"
 ```
 
-### Get Info
+## Validation Snapshot
 
-```bash
-agent-browser get text <sel>          # Get text content
-agent-browser get html <sel>          # Get innerHTML
-agent-browser get value <sel>         # Get input value
-agent-browser get attr <sel> <attr>   # Get attribute
-agent-browser get title               # Get page title
-agent-browser get url                 # Get current URL
-agent-browser get count <sel>         # Count matching elements
-agent-browser get box <sel>           # Get bounding box
-agent-browser get styles <sel>        # Get computed styles
-```
+Manual checks were run against common public detection pages in headed mode, including:
 
-### Check State
+- [bot.sannysoft.com](https://bot.sannysoft.com/)
+- [CreepJS](https://abrahamjuliot.github.io/creepjs/)
+- [areyouheadless](https://arh.antoinevastel.com/bots/areyouheadless)
+- [detect-headless](https://infosimples.github.io/detect-headless)
 
-```bash
-agent-browser is visible <sel>        # Check if visible
-agent-browser is enabled <sel>        # Check if enabled
-agent-browser is checked <sel>        # Check if checked
-```
-
-### Find Elements (Semantic Locators)
-
-```bash
-agent-browser find role <role> <action> [value]       # By ARIA role
-agent-browser find text <text> <action>               # By text content
-agent-browser find label <label> <action> [value]     # By label
-agent-browser find placeholder <ph> <action> [value]  # By placeholder
-agent-browser find alt <text> <action>                # By alt text
-agent-browser find title <text> <action>              # By title attr
-agent-browser find testid <id> <action> [value]       # By data-testid
-agent-browser find first <sel> <action> [value]       # First match
-agent-browser find last <sel> <action> [value]        # Last match
-agent-browser find nth <n> <sel> <action> [value]     # Nth match
-```
-
-**Actions:** `click`, `fill`, `type`, `hover`, `focus`, `check`, `uncheck`, `text`
-
-**Options:** `--name <name>` (filter role by accessible name), `--exact` (require exact text match)
-
-**Examples:**
-```bash
-agent-browser find role button click --name "Submit"
-agent-browser find text "Sign In" click
-agent-browser find label "Email" fill "test@test.com"
-agent-browser find first ".item" click
-agent-browser find nth 2 "a" text
-```
-
-### Wait
-
-```bash
-agent-browser wait <selector>         # Wait for element to be visible
-agent-browser wait <ms>               # Wait for time (milliseconds)
-agent-browser wait 2000-5000          # Random wait between 2-5 seconds
-agent-browser wait --text "Welcome"   # Wait for text to appear
-agent-browser wait --url "**/dash"    # Wait for URL pattern
-agent-browser wait --load networkidle # Wait for load state
-agent-browser wait --fn "window.ready === true"  # Wait for JS condition
-```
-
-**Load states:** `load`, `domcontentloaded`, `networkidle`
-
-### Mouse Control
-
-```bash
-agent-browser mouse move <x> <y>      # Move mouse
-agent-browser mouse down [button]     # Press button (left/right/middle)
-agent-browser mouse up [button]       # Release button
-agent-browser mouse wheel <dy> [dx]   # Scroll wheel
-```
-
-### Browser Settings
-
-```bash
-agent-browser set viewport <w> <h>    # Set viewport size
-agent-browser set device <name>       # Emulate device ("iPhone 14")
-agent-browser set geo <lat> <lng>     # Set geolocation
-agent-browser set offline [on|off]    # Toggle offline mode
-agent-browser set headers <json>      # Extra HTTP headers
-agent-browser set credentials <u> <p> # HTTP basic auth
-agent-browser set media [dark|light]  # Emulate color scheme
-```
-
-### Cookies & Storage
-
-```bash
-agent-browser cookies                 # Get all cookies
-agent-browser cookies set <name> <val> # Set cookie
-agent-browser cookies clear           # Clear cookies
-
-agent-browser storage local           # Get all localStorage
-agent-browser storage local <key>     # Get specific key
-agent-browser storage local set <k> <v>  # Set value
-agent-browser storage local clear     # Clear all
-
-agent-browser storage session         # Same for sessionStorage
-```
-
-### Network
-
-```bash
-agent-browser network route <url>              # Intercept requests
-agent-browser network route <url> --abort      # Block requests
-agent-browser network route <url> --body <json>  # Mock response
-agent-browser network unroute [url]            # Remove routes
-agent-browser network requests                 # View tracked requests
-agent-browser network requests --filter api    # Filter requests
-```
-
-### Tabs & Windows
-
-```bash
-agent-browser tab                     # List tabs
-agent-browser tab new [url]           # New tab (optionally with URL)
-agent-browser tab <n>                 # Switch to tab n
-agent-browser tab close [n]           # Close tab
-agent-browser window new              # New window
-```
-
-### Frames
-
-```bash
-agent-browser frame <sel>             # Switch to iframe
-agent-browser frame main              # Back to main frame
-```
-
-### Dialogs
-
-```bash
-agent-browser dialog accept [text]    # Accept (with optional prompt text)
-agent-browser dialog dismiss          # Dismiss
-```
-
-### Diff
-
-```bash
-agent-browser diff snapshot                              # Compare current vs last snapshot
-agent-browser diff snapshot --baseline before.txt        # Compare current vs saved snapshot file
-agent-browser diff snapshot --selector "#main" --compact # Scoped snapshot diff
-agent-browser diff screenshot --baseline before.png      # Visual pixel diff against baseline
-agent-browser diff screenshot --baseline b.png -o d.png  # Save diff image to custom path
-agent-browser diff screenshot --baseline b.png -t 0.2    # Adjust color threshold (0-1)
-agent-browser diff url https://v1.com https://v2.com     # Compare two URLs (snapshot diff)
-agent-browser diff url https://v1.com https://v2.com --screenshot  # Also visual diff
-agent-browser diff url https://v1.com https://v2.com --wait-until networkidle  # Custom wait strategy
-agent-browser diff url https://v1.com https://v2.com --selector "#main"  # Scope to element
-```
-
-### Debug
-
-```bash
-agent-browser trace start [path]      # Start recording trace
-agent-browser trace stop [path]       # Stop and save trace
-agent-browser profiler start          # Start Chrome DevTools profiling
-agent-browser profiler stop [path]    # Stop and save profile (.json)
-agent-browser console                 # View console messages (log, error, warn, info)
-agent-browser console --clear         # Clear console
-agent-browser errors                  # View page errors (uncaught JavaScript exceptions)
-agent-browser errors --clear          # Clear errors
-agent-browser highlight <sel>         # Highlight element
-agent-browser state save <path>       # Save auth state
-agent-browser state load <path>       # Load auth state
-agent-browser state list              # List saved state files
-agent-browser state show <file>       # Show state summary
-agent-browser state rename <old> <new> # Rename state file
-agent-browser state clear [name]      # Clear states for session
-agent-browser state clear --all       # Clear all saved states
-agent-browser state clean --older-than <days>  # Delete old states
-```
-
-### Navigation
-
-```bash
-agent-browser back                    # Go back
-agent-browser forward                 # Go forward
-agent-browser reload                  # Reload page
-```
-
-### Setup
-
-```bash
-agent-browser install                 # Download Chromium browser
-agent-browser install --with-deps     # Also install system deps (Linux)
-```
-
-## Sessions
-
-Run multiple isolated browser instances:
-
-```bash
-# Different sessions
-agent-browser --session agent1 open site-a.com
-agent-browser --session agent2 open site-b.com
-
-# Or via environment variable
-AGENT_BROWSER_SESSION=agent1 agent-browser click "#btn"
-
-# List active sessions
-agent-browser session list
-# Output:
-# Active sessions:
-# -> default
-#    agent1
-
-# Show current session
-agent-browser session
-```
-
-Each session has its own:
-- Browser instance
-- Cookies and storage
-- Navigation history
-- Authentication state
-
-## Session Persistence
-
-Use `--session-name` to automatically save and restore cookies and localStorage across browser restarts:
-
-```bash
-# Auto-save/load state for "twitter" session
-agent-browser --session-name twitter open twitter.com
-
-# Login once, then state persists automatically
-# State files stored in ~/.agent-browser/sessions/
-
-# Or via environment variable
-export AGENT_BROWSER_SESSION_NAME=twitter
-agent-browser open twitter.com
-```
-
-### State Encryption
-
-Encrypt saved session data at rest with AES-256-GCM:
-
-```bash
-# Generate key: openssl rand -hex 32
-export AGENT_BROWSER_ENCRYPTION_KEY=<64-char-hex-key>
-
-# State files are now encrypted automatically
-agent-browser --session-name secure open example.com
-```
-
-| Variable | Description |
-|----------|-------------|
-| `AGENT_BROWSER_SESSION_NAME` | Auto-save/load state persistence name |
-| `AGENT_BROWSER_ENCRYPTION_KEY` | 64-char hex key for AES-256-GCM encryption |
-| `AGENT_BROWSER_STATE_EXPIRE_DAYS` | Auto-delete states older than N days (default: 30) |
-
-## Snapshot Options
-
-The `snapshot` command supports filtering to reduce output size:
-
-```bash
-agent-browser snapshot                    # Full accessibility tree
-agent-browser snapshot -i                 # Interactive elements only (buttons, inputs, links)
-agent-browser snapshot -i -C              # Include cursor-interactive elements (divs with onclick, etc.)
-agent-browser snapshot -c                 # Compact (remove empty structural elements)
-agent-browser snapshot -d 3               # Limit depth to 3 levels
-agent-browser snapshot -s "#main"         # Scope to CSS selector
-agent-browser snapshot -i -c -d 5         # Combine options
-```
-
-| Option | Description |
-|--------|-------------|
-| `-i, --interactive` | Only show interactive elements (buttons, links, inputs) |
-| `-C, --cursor` | Include cursor-interactive elements (cursor:pointer, onclick, tabindex) |
-| `-c, --compact` | Remove empty structural elements |
-| `-d, --depth <n>` | Limit tree depth |
-| `-s, --selector <sel>` | Scope to CSS selector |
-
-The `-C` flag is useful for modern web apps that use custom clickable elements (divs, spans) instead of standard buttons/links.
-
-## Annotated Screenshots
-
-The `--annotate` flag overlays numbered labels on interactive elements in the screenshot. Each label `[N]` corresponds to ref `@eN`, so the same refs work for both visual and text-based workflows.
-
-```bash
-agent-browser screenshot --annotate
-# -> Screenshot saved to /tmp/screenshot-2026-02-17T12-00-00-abc123.png
-#    [1] @e1 button "Submit"
-#    [2] @e2 link "Home"
-#    [3] @e3 textbox "Email"
-```
-
-After an annotated screenshot, refs are cached so you can immediately interact with elements:
-
-```bash
-agent-browser screenshot --annotate ./page.png
-agent-browser click @e2     # Click the "Home" link labeled [2]
-```
-
-This is useful for multimodal AI models that can reason about visual layout, unlabeled icon buttons, canvas elements, or visual state that the text accessibility tree cannot capture.
-
-## Options
-
-| Option | Description |
-|--------|-------------|
-| `--session <name>` | Use isolated session (or `AGENT_BROWSER_SESSION` env) |
-| `--session-name <name>` | Auto-save/restore session state (or `AGENT_BROWSER_SESSION_NAME` env) |
-| `--state <path>` | Load storage state from JSON file (or `AGENT_BROWSER_STATE` env) |
-| `--headers <json>` | Set HTTP headers scoped to the URL's origin |
-| `--executable-path <path>` | Custom browser executable (or `AGENT_BROWSER_EXECUTABLE_PATH` env) |
-| `--extension <path>` | Load browser extension (repeatable; or `AGENT_BROWSER_EXTENSIONS` env) |
-| `--args <args>` | Browser launch args, comma or newline separated (or `AGENT_BROWSER_ARGS` env) |
-| `--user-agent <ua>` | Custom User-Agent string (or `AGENT_BROWSER_USER_AGENT` env) |
-| `--proxy <url>` | Proxy server URL with optional auth (or `AGENT_BROWSER_PROXY` env) |
-| `--proxy-bypass <hosts>` | Hosts to bypass proxy (or `AGENT_BROWSER_PROXY_BYPASS` env) |
-| `--ignore-https-errors` | Ignore HTTPS certificate errors (useful for self-signed certs) |
-| `--allow-file-access` | Allow file:// URLs to access local files (Chromium only) |
-| `-p, --provider <name>` | Cloud browser provider (or `AGENT_BROWSER_PROVIDER` env) |
-| `--device <name>` | iOS device name, e.g. "iPhone 15 Pro" (or `AGENT_BROWSER_IOS_DEVICE` env) |
-| `--json` | JSON output (for agents) |
-| `--full, -f` | Full page screenshot |
-| `--annotate` | Annotated screenshot with numbered element labels (or `AGENT_BROWSER_ANNOTATE` env) |
-| `--headed` | Show browser window (not headless) |
-| `--cdp <port\|url>` | Connect via Chrome DevTools Protocol (port or WebSocket URL) |
-| `--auto-connect` | Auto-discover and connect to running Chrome (or `AGENT_BROWSER_AUTO_CONNECT` env) |
-| `--color-scheme <scheme>` | Color scheme: `dark`, `light`, `no-preference` (or `AGENT_BROWSER_COLOR_SCHEME` env) |
-| `--config <path>` | Use a custom config file (or `AGENT_BROWSER_CONFIG` env) |
-| `--debug` | Debug output |
-
-Project policy:
-- `--profile` / `AGENT_BROWSER_PROFILE` are forbidden
-- `--channel` / `AGENT_BROWSER_CHANNEL` are forbidden
-- Default mode must connect to an existing browser at `localhost:9333` (no automatic local-launch fallback)
-
-## Configuration
-
-Create an `agent-browser.json` file to set persistent defaults instead of repeating flags on every command.
-
-**Locations (lowest to highest priority):**
-
-1. `~/.agent-browser/config.json` -- user-level defaults
-2. `./agent-browser.json` -- project-level overrides (in working directory)
-3. `AGENT_BROWSER_*` environment variables override config file values
-4. CLI flags override everything
-
-**Example `agent-browser.json`:**
-
-```json
-{
-  "headed": true,
-  "proxy": "http://localhost:8080",
-  "userAgent": "my-agent/1.0",
-  "ignoreHttpsErrors": true
-}
-```
-
-Use `--config <path>` or `AGENT_BROWSER_CONFIG` to load a specific config file instead of the defaults:
-
-```bash
-agent-browser --config ./ci-config.json open example.com
-AGENT_BROWSER_CONFIG=./ci-config.json agent-browser open example.com
-```
-
-All options from the table above can be set in the config file using camelCase keys (e.g., `--executable-path` becomes `"executablePath"`, `--proxy-bypass` becomes `"proxyBypass"`). Unknown keys are ignored for forward compatibility.
-
-Boolean flags accept an optional `true`/`false` value to override config settings. For example, `--headed false` disables `"headed": true` from config. A bare `--headed` is equivalent to `--headed true`.
-
-Auto-discovered config files that are missing are silently ignored. If `--config <path>` points to a missing or invalid file, agent-browser exits with an error. Extensions from user and project configs are merged (concatenated), not replaced.
-
-> **Tip:** If your project-level `agent-browser.json` contains environment-specific values (paths, proxies), consider adding it to `.gitignore`.
-
-## Default Timeout
-
-The default Playwright timeout for standard operations (clicks, waits, fills, etc.) is 25 seconds. This is intentionally below the CLI's 30-second IPC read timeout so that Playwright returns a proper error instead of the CLI timing out with EAGAIN.
-
-Override the default timeout via environment variable:
-
-```bash
-# Set a longer timeout for slow pages (in milliseconds)
-export AGENT_BROWSER_DEFAULT_TIMEOUT=45000
-```
-
-> **Note:** Setting this above 30000 (30s) may cause EAGAIN errors on slow operations because the CLI's read timeout will expire before Playwright responds. The CLI retries transient errors automatically, but response times will increase.
-
-| Variable | Description |
-|----------|-------------|
-| `AGENT_BROWSER_DEFAULT_TIMEOUT` | Default Playwright timeout in ms (default: 25000) |
-
-## Selectors
-
-### Refs (Recommended for AI)
-
-Refs provide deterministic element selection from snapshots:
-
-```bash
-# 1. Get snapshot with refs
-agent-browser snapshot
-# Output:
-# - heading "Example Domain" [ref=e1] [level=1]
-# - button "Submit" [ref=e2]
-# - textbox "Email" [ref=e3]
-# - link "Learn more" [ref=e4]
-
-# 2. Use refs to interact
-agent-browser click @e2                   # Click the button
-agent-browser fill @e3 "test@example.com" # Fill the textbox
-agent-browser get text @e1                # Get heading text
-agent-browser hover @e4                   # Hover the link
-```
-
-**Why use refs?**
-- **Deterministic**: Ref points to exact element from snapshot
-- **Fast**: No DOM re-query needed
-- **AI-friendly**: Snapshot + ref workflow is optimal for LLMs
-
-### CSS Selectors
-
-```bash
-agent-browser click "#id"
-agent-browser click ".class"
-agent-browser click "div > button"
-```
-
-### Text & XPath
-
-```bash
-agent-browser click "text=Submit"
-agent-browser click "xpath=//button"
-```
-
-### Semantic Locators
-
-```bash
-agent-browser find role button click --name "Submit"
-agent-browser find label "Email" fill "test@test.com"
-```
-
-## Agent Mode
-
-Use `--json` for machine-readable output:
-
-```bash
-agent-browser snapshot --json
-# Returns: {"success":true,"data":{"snapshot":"...","refs":{"e1":{"role":"heading","name":"Title"},...}}}
-
-agent-browser get text @e1 --json
-agent-browser is visible @e2 --json
-```
-
-### Optimal AI Workflow
-
-```bash
-# 1. Navigate and get snapshot
-agent-browser open example.com
-agent-browser snapshot -i --json   # AI parses tree and refs
-
-# 2. AI identifies target refs from snapshot
-# 3. Execute actions using refs
-agent-browser click @e2
-agent-browser fill @e3 "input text"
-
-# 4. Get new snapshot if page changed
-agent-browser snapshot -i --json
-```
-
-### Command Chaining
-
-Commands can be chained with `&&` in a single shell invocation. The browser persists via a background daemon, so chaining is safe and more efficient:
-
-```bash
-# Open, wait for load, and snapshot in one call
-agent-browser open example.com && agent-browser wait --load networkidle && agent-browser snapshot -i
-
-# Chain multiple interactions
-agent-browser fill @e1 "user@example.com" && agent-browser fill @e2 "pass" && agent-browser click @e3
-
-# Navigate and screenshot
-agent-browser open example.com && agent-browser wait --load networkidle && agent-browser screenshot page.png
-```
-
-Use `&&` when you don't need intermediate output. Run commands separately when you need to parse output first (e.g., snapshot to discover refs before interacting).
-
-## Headed Mode
-
-Show the browser window for debugging:
-
-```bash
-agent-browser open example.com --headed
-```
-
-This opens a visible browser window instead of running headless.
-
-## Authenticated Sessions
-
-Use `--headers` to set HTTP headers for a specific origin, enabling authentication without login flows:
-
-```bash
-# Headers are scoped to api.example.com only
-agent-browser open api.example.com --headers '{"Authorization": "Bearer <token>"}'
-
-# Requests to api.example.com include the auth header
-agent-browser snapshot -i --json
-agent-browser click @e2
-
-# Navigate to another domain - headers are NOT sent (safe!)
-agent-browser open other-site.com
-```
-
-This is useful for:
-- **Skipping login flows** - Authenticate via headers instead of UI
-- **Switching users** - Start new sessions with different auth tokens
-- **API testing** - Access protected endpoints directly
-- **Security** - Headers are scoped to the origin, not leaked to other domains
-
-To set headers for multiple origins, use `--headers` with each `open` command:
-
-```bash
-agent-browser open api.example.com --headers '{"Authorization": "Bearer token1"}'
-agent-browser open api.acme.com --headers '{"Authorization": "Bearer token2"}'
-```
-
-For global headers (all domains), use `set headers`:
-
-```bash
-agent-browser set headers '{"X-Custom-Header": "value"}'
-```
-
-## Custom Browser Executable
-
-Use a custom browser executable instead of the bundled Chromium. This is useful for:
-- **Serverless deployment**: Use lightweight Chromium builds like `@sparticuz/chromium` (~50MB vs ~684MB)
-- **System browsers**: Use an existing Chrome/Chromium installation
-- **Custom builds**: Use modified browser builds
-
-### CLI Usage
-
-```bash
-# Via flag
-agent-browser --executable-path /path/to/chromium open example.com
-
-# Via environment variable
-AGENT_BROWSER_EXECUTABLE_PATH=/path/to/chromium agent-browser open example.com
-```
-
-### Serverless Example (Vercel/AWS Lambda)
-
-```typescript
-import chromium from '@sparticuz/chromium';
-import { BrowserManager } from 'agent-browser-stealth';
-
-export async function handler() {
-  const browser = new BrowserManager();
-  await browser.launch({
-    executablePath: await chromium.executablePath(),
-    headless: true,
-  });
-  // ... use browser
-}
-```
-
-## Local Files
-
-Open and interact with local files (PDFs, HTML, etc.) using `file://` URLs:
-
-```bash
-# Enable file access (required for JavaScript to access local files)
-agent-browser --allow-file-access open file:///path/to/document.pdf
-agent-browser --allow-file-access open file:///path/to/page.html
-
-# Take screenshot of a local PDF
-agent-browser --allow-file-access open file:///Users/me/report.pdf
-agent-browser screenshot report.png
-```
-
-The `--allow-file-access` flag adds Chromium flags (`--allow-file-access-from-files`, `--allow-file-access`) that allow `file://` URLs to:
-- Load and render local files
-- Access other local files via JavaScript (XHR, fetch)
-- Load local resources (images, scripts, stylesheets)
-
-**Note:** This flag only works with Chromium. For security, it's disabled by default.
-
-## Stealth Mode
-
-`agent-browser-stealth` is built around stealth as a primary design goal, not an add-on.
-Stealth is **always on** with no flag needed. Every browser session automatically applies anti-detection countermeasures:
-Legacy protocol field `launch.stealth` is accepted for compatibility but ignored.
-
-- **Uses Chrome channel for Chromium launches** -- local Chromium sessions are launched through Playwright's `chrome` channel for a genuine Chrome fingerprint
-
-- Removes `navigator.webdriver` automation indicator
-- Disables Chromium's `AutomationControlled` blink feature
-- Replaces "HeadlessChrome" in User-Agent and userAgentData (including CDP-level override)
-- Preserves explicit custom User-Agent from `--user-agent` / `launch({ userAgent })`
-- Uses ANGLE rendering instead of SwiftShader to avoid GPU fingerprinting
-- Adds realistic `navigator.plugins` and `navigator.mimeTypes` (passes `instanceof` checks)
-- Patches `window.chrome.runtime` to match real Chrome
-- Masks WebGL vendor/renderer
-- Fixes `navigator.permissions.query` for notifications
-- Reports realistic `navigator.hardwareConcurrency` and `performance.memory`
-- Provides default media devices for `enumerateDevices()`
-- Patches screen/window dimensions to avoid viewport-equals-screen fingerprint
-- Sets opaque background color (headless default is transparent)
-- Cleans up CDP-injected properties on the document
-
-### Stealth Verification / Anti-detection test results
-
-The following public anti-bot / fingerprinting sites were tested with `agent-browser-stealth` (headed mode). All passed with no captcha or block.
-
-**1. [bot.sannysoft.com](https://bot.sannysoft.com/)**
-
-| Test | Result |
-|------|--------|
-| User Agent (Old) | ✅ |
-| **WebDriver (New)** | ✅ missing (passed) |
-| WebDriver Advanced | ✅ |
-| Chrome (New) | ✅ |
-| Permissions / Plugins / Languages / WebGL / Broken Image | ✅ |
-| **navigator.webdriver** | **undefined** ✅ |
-
-**2. [CreepJS](https://abrahamjuliot.github.io/creepjs/)**
-
-| Metric | Result |
-|--------|--------|
-| like headless | 0% ✅ |
-| headless | 0% ✅ |
-| stealth | 0% ✅ |
-
-**3. [arh.antoinevastel.com/bots/areyouheadless](https://arh.antoinevastel.com/bots/areyouheadless)**
-
-- **"You are not Chrome headless"** ✅
-
-**4. [infosimples.github.io/detect-headless](https://infosimples.github.io/detect-headless)**
-
-- Webdriver: **Missing webdriver** ✅  
-- Plugins / Mime / Chrome / Permission / Devtool Protocol / Broken Image: normal ✅  
-
-Reproduce (CreepJS):
+Reproduce CreepJS check:
 
 ```bash
 node scripts/check-creepjs-headless.js --binary ./cli/target/release/agent-browser
 ```
 
-Manual check against all sites:
+## Command Coverage And Docs
 
-```bash
-agent-browser-stealth --session test --headed open https://bot.sannysoft.com/
-# then: CreepJS, areyouheadless, detect-headless
-```
+Core command set is intentionally kept compatible with upstream `agent-browser`.
 
-### Humanized Interactions
+- Full command reference: [upstream agent-browser docs](https://github.com/vercel-labs/agent-browser)
+- Local help: `agent-browser --help`
 
-All interactions are automatically humanized to avoid behavioral detection:
+## Fork Policies
 
-- **Randomized typing** -- When using `type --delay`, each keystroke delay varies by +-40% so timing appears natural rather than mechanical
-- **Random wait ranges** -- `wait 2000-5000` pauses for a random duration between 2 and 5 seconds
-- **Bezier curve mouse movement** -- Before every `click`, the mouse moves to the target element along a randomized cubic Bezier curve with natural-looking control points
-- **Navigation pacing** -- Each page navigation includes a short random delay (300-1000ms) to avoid burst patterns
+This fork enforces a few operational policies:
 
-These behaviors are always active and require no additional flags.
+- `--profile` / `AGENT_BROWSER_PROFILE` are forbidden
+- `--channel` / `AGENT_BROWSER_CHANNEL` are forbidden
+- Default mode expects an existing browser via CDP on `localhost:9333`
 
-### Auto Region Detection
+## Maintainer Notes (Fork Release)
 
-When navigating to a site, the URL's TLD is used to automatically match locale, timezone, and Accept-Language headers to the target region. For example, opening `shopee.tw` automatically sets locale to `zh-TW` and timezone to `Asia/Taipei`, eliminating region-signal mismatches that server-side risk systems commonly flag.
-
-Supported TLDs include: `.tw`, `.cn`, `.hk`, `.jp`, `.kr`, `.th`, `.vn`, `.sg`, `.my`, `.id`, `.ph`, `.br`, `.mx`, `.de`, `.fr`, `.uk`, `.ru`, `.in`, `.au`, and more.
-
-Override with environment variables: `AGENT_BROWSER_LOCALE`, `AGENT_BROWSER_TIMEZONE`.
-
-### Captcha / Verification Detection
-
-If a navigation lands on a known captcha or verification page (detected by URL patterns like `/verify/captcha` or titles like "Checking your browser"), the browser automatically retries up to 2 times with randomized backoff (3-7 seconds). If all retries are exhausted, a warning suggests `--headed` mode or `--session-name` persistence.
-
-## CDP Mode
-
-Connect to an existing browser via Chrome DevTools Protocol:
-
-By default in this fork, when you run commands without `--cdp`, agent-browser requires an existing browser at `localhost:9333` (resident browser via CDP). If CDP is unavailable, the command fails fast instead of launching a new managed browser.
-
-```bash
-# Start Chrome with: google-chrome --remote-debugging-port=9222
-
-# Connect once, then run commands without --cdp
-agent-browser connect 9222
-agent-browser snapshot
-agent-browser tab
-agent-browser close
-
-# Or pass --cdp on each command
-agent-browser --cdp 9222 snapshot
-
-# Connect to remote browser via WebSocket URL
-agent-browser --cdp "wss://your-browser-service.com/cdp?token=..." snapshot
-```
-
-The `--cdp` flag accepts either:
-- A port number (e.g., `9222`) for local connections via `http://localhost:{port}`
-- A full WebSocket URL (e.g., `wss://...` or `ws://...`) for remote browser services
-
-This enables control of:
-- Electron apps
-- Chrome/Chromium instances with remote debugging
-- WebView2 applications
-- Any browser exposing a CDP endpoint
-
-### Auto-Connect
-
-Use `--auto-connect` to automatically discover and connect to a running Chrome instance without specifying a port:
-
-```bash
-# Auto-discover running Chrome with remote debugging
-agent-browser --auto-connect open example.com
-agent-browser --auto-connect snapshot
-
-# Or via environment variable
-AGENT_BROWSER_AUTO_CONNECT=1 agent-browser snapshot
-```
-
-Auto-connect discovers Chrome by:
-1. Reading Chrome's `DevToolsActivePort` file from the default user data directory
-2. Falling back to probing common debugging ports (9222, 9229, 9333)
-
-This is useful when:
-- Chrome 144+ has remote debugging enabled via `chrome://inspect/#remote-debugging` (which uses a dynamic port)
-- You want a zero-configuration connection to your existing browser
-- You don't want to track which port Chrome is using
-
-## Streaming (Browser Preview)
-
-Stream the browser viewport via WebSocket for live preview or "pair browsing" where a human can watch and interact alongside an AI agent.
-
-### Enable Streaming
-
-Set the `AGENT_BROWSER_STREAM_PORT` environment variable:
-
-```bash
-AGENT_BROWSER_STREAM_PORT=9223 agent-browser open example.com
-```
-
-This starts a WebSocket server on the specified port that streams the browser viewport and accepts input events.
-
-### WebSocket Protocol
-
-Connect to `ws://localhost:9223` to receive frames and send input:
-
-**Receive frames:**
-```json
-{
-  "type": "frame",
-  "data": "<base64-encoded-jpeg>",
-  "metadata": {
-    "deviceWidth": 1280,
-    "deviceHeight": 720,
-    "pageScaleFactor": 1,
-    "offsetTop": 0,
-    "scrollOffsetX": 0,
-    "scrollOffsetY": 0
-  }
-}
-```
-
-**Send mouse events:**
-```json
-{
-  "type": "input_mouse",
-  "eventType": "mousePressed",
-  "x": 100,
-  "y": 200,
-  "button": "left",
-  "clickCount": 1
-}
-```
-
-**Send keyboard events:**
-```json
-{
-  "type": "input_keyboard",
-  "eventType": "keyDown",
-  "key": "Enter",
-  "code": "Enter"
-}
-```
-
-**Send touch events:**
-```json
-{
-  "type": "input_touch",
-  "eventType": "touchStart",
-  "touchPoints": [{ "x": 100, "y": 200 }]
-}
-```
-
-### Programmatic API
-
-For advanced use, control streaming directly via the protocol:
-
-```typescript
-import { BrowserManager } from 'agent-browser-stealth';
-
-const browser = new BrowserManager();
-await browser.launch({ headless: true });
-await browser.navigate('https://example.com');
-
-// Start screencast
-await browser.startScreencast((frame) => {
-  // frame.data is base64-encoded image
-  // frame.metadata contains viewport info
-  console.log('Frame received:', frame.metadata.deviceWidth, 'x', frame.metadata.deviceHeight);
-}, {
-  format: 'jpeg',
-  quality: 80,
-  maxWidth: 1280,
-  maxHeight: 720,
-});
-
-// Inject mouse events
-await browser.injectMouseEvent({
-  type: 'mousePressed',
-  x: 100,
-  y: 200,
-  button: 'left',
-});
-
-// Inject keyboard events
-await browser.injectKeyboardEvent({
-  type: 'keyDown',
-  key: 'Enter',
-  code: 'Enter',
-});
-
-// Stop when done
-await browser.stopScreencast();
-```
-
-## Architecture
-
-agent-browser uses a client-daemon architecture:
-
-1. **Rust CLI** (fast native binary) - Parses commands, communicates with daemon
-2. **Node.js Daemon** - Manages Playwright browser instance
-3. **Fallback** - If native binary unavailable, uses Node.js directly
-
-The daemon starts automatically on first command and persists between commands for fast subsequent operations.
-
-**Browser Engine:** Uses Chromium by default. The daemon also supports Firefox and WebKit via the Playwright protocol.
-
-## Platforms
-
-| Platform | Binary | Fallback |
-|----------|--------|----------|
-| macOS ARM64 | Native Rust | Node.js |
-| macOS x64 | Native Rust | Node.js |
-| Linux ARM64 | Native Rust | Node.js |
-| Linux x64 | Native Rust | Node.js |
-| Windows x64 | Native Rust | Node.js |
-
-## Usage with AI Agents
-
-### Just ask the agent
-
-The simplest approach -- just tell your agent to use it:
-
-```
-Use agent-browser to test the login flow. Run agent-browser --help to see available commands.
-```
-
-The `--help` output is comprehensive and most agents can figure it out from there.
-
-### AI Coding Assistants (recommended)
-
-Add the skill to your AI coding assistant for richer context:
-
-```bash
-npx skills add leeguooooo/agent-browser
-```
-
-This works with Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, Goose, OpenCode, and Windsurf. The skill is fetched from the repository, so it stays up to date automatically -- do not copy `SKILL.md` from `node_modules` as it will become stale.
-
-### Claude Code
-
-Install as a Claude Code skill:
-
-```bash
-npx skills add leeguooooo/agent-browser
-```
-
-This adds the skill to `.claude/skills/agent-browser/SKILL.md` in your project. The skill teaches Claude Code the full agent-browser workflow, including the snapshot-ref interaction pattern, session management, and timeout handling.
-
-### AGENTS.md / CLAUDE.md
-
-For more consistent results, add to your project or global instructions file:
-
-```markdown
-## Browser Automation
-
-Use `agent-browser` for web automation. Run `agent-browser --help` for all commands.
-
-Core workflow:
-1. `agent-browser open <url>` - Navigate to page
-2. `agent-browser snapshot -i` - Get interactive elements with refs (@e1, @e2)
-3. `agent-browser click @e1` / `fill @e2 "text"` - Interact using refs
-4. Re-snapshot after page changes
-```
-
-## Integrations
-
-### iOS Simulator
-
-Control real Mobile Safari in the iOS Simulator for authentic mobile web testing. Requires macOS with Xcode.
-
-**Setup:**
-
-```bash
-# Install Appium and XCUITest driver
-npm install -g appium
-appium driver install xcuitest
-```
-
-**Usage:**
-
-```bash
-# List available iOS simulators
-agent-browser device list
-
-# Launch Safari on a specific device
-agent-browser -p ios --device "iPhone 16 Pro" open https://example.com
-
-# Same commands as desktop
-agent-browser -p ios snapshot -i
-agent-browser -p ios tap @e1
-agent-browser -p ios fill @e2 "text"
-agent-browser -p ios screenshot mobile.png
-
-# Mobile-specific commands
-agent-browser -p ios swipe up
-agent-browser -p ios swipe down 500
-
-# Close session
-agent-browser -p ios close
-```
-
-Or use environment variables:
-
-```bash
-export AGENT_BROWSER_PROVIDER=ios
-export AGENT_BROWSER_IOS_DEVICE="iPhone 16 Pro"
-agent-browser open https://example.com
-```
-
-| Variable | Description |
-|----------|-------------|
-| `AGENT_BROWSER_PROVIDER` | Set to `ios` to enable iOS mode |
-| `AGENT_BROWSER_IOS_DEVICE` | Device name (e.g., "iPhone 16 Pro", "iPad Pro") |
-| `AGENT_BROWSER_IOS_UDID` | Device UDID (alternative to device name) |
-
-**Supported devices:** All iOS Simulators available in Xcode (iPhones, iPads), plus real iOS devices.
-
-**Note:** The iOS provider boots the simulator, starts Appium, and controls Safari. First launch takes ~30-60 seconds; subsequent commands are fast.
-
-#### Real Device Support
-
-Appium also supports real iOS devices connected via USB. This requires additional one-time setup:
-
-**1. Get your device UDID:**
-```bash
-xcrun xctrace list devices
-# or
-system_profiler SPUSBDataType | grep -A 5 "iPhone\|iPad"
-```
-
-**2. Sign WebDriverAgent (one-time):**
-```bash
-# Open the WebDriverAgent Xcode project
-cd ~/.appium/node_modules/appium-xcuitest-driver/node_modules/appium-webdriveragent
-open WebDriverAgent.xcodeproj
-```
-
-In Xcode:
-- Select the `WebDriverAgentRunner` target
-- Go to Signing & Capabilities
-- Select your Team (requires Apple Developer account, free tier works)
-- Let Xcode manage signing automatically
-
-**3. Use with agent-browser:**
-```bash
-# Connect device via USB, then:
-agent-browser -p ios --device "<DEVICE_UDID>" open https://example.com
-
-# Or use the device name if unique
-agent-browser -p ios --device "John's iPhone" open https://example.com
-```
-
-**Real device notes:**
-- First run installs WebDriverAgent to the device (may require Trust prompt)
-- Device must be unlocked and connected via USB
-- Slightly slower initial connection than simulator
-- Tests against real Safari performance and behavior
-
-### Browserbase
-
-[Browserbase](https://browserbase.com) provides remote browser infrastructure to make deployment of agentic browsing agents easy. Use it when running the agent-browser CLI in an environment where a local browser isn't feasible.
-
-To enable Browserbase, use the `-p` flag:
-
-```bash
-export BROWSERBASE_API_KEY="your-api-key"
-export BROWSERBASE_PROJECT_ID="your-project-id"
-agent-browser -p browserbase open https://example.com
-```
-
-Or use environment variables for CI/scripts:
-
-```bash
-export AGENT_BROWSER_PROVIDER=browserbase
-export BROWSERBASE_API_KEY="your-api-key"
-export BROWSERBASE_PROJECT_ID="your-project-id"
-agent-browser open https://example.com
-```
-
-When enabled, agent-browser connects to a Browserbase session instead of launching a local browser. All commands work identically.
-
-Get your API key and project ID from the [Browserbase Dashboard](https://browserbase.com/overview).
-
-### Browser Use
-
-[Browser Use](https://browser-use.com) provides cloud browser infrastructure for AI agents. Use it when running agent-browser in environments where a local browser isn't available (serverless, CI/CD, etc.).
-
-To enable Browser Use, use the `-p` flag:
-
-```bash
-export BROWSER_USE_API_KEY="your-api-key"
-agent-browser -p browseruse open https://example.com
-```
-
-Or use environment variables for CI/scripts:
-
-```bash
-export AGENT_BROWSER_PROVIDER=browseruse
-export BROWSER_USE_API_KEY="your-api-key"
-agent-browser open https://example.com
-```
-
-When enabled, agent-browser connects to a Browser Use cloud session instead of launching a local browser. All commands work identically.
-
-Get your API key from the [Browser Use Cloud Dashboard](https://cloud.browser-use.com/settings?tab=api-keys). Free credits are available to get started, with pay-as-you-go pricing after.
-
-### Kernel
-
-[Kernel](https://www.kernel.sh) provides cloud browser infrastructure for AI agents with features like stealth mode and persistent profiles.
-
-To enable Kernel, use the `-p` flag:
-
-```bash
-export KERNEL_API_KEY="your-api-key"
-agent-browser -p kernel open https://example.com
-```
-
-Or use environment variables for CI/scripts:
-
-```bash
-export AGENT_BROWSER_PROVIDER=kernel
-export KERNEL_API_KEY="your-api-key"
-agent-browser open https://example.com
-```
-
-Optional configuration via environment variables:
-
-| Variable | Description | Default |
-|----------|-------------|---------|
-| `KERNEL_HEADLESS` | Run browser in headless mode (`true`/`false`) | `false` |
-| `KERNEL_STEALTH` | Enable stealth mode to avoid bot detection (`true`/`false`) | `true` |
-| `KERNEL_TIMEOUT_SECONDS` | Session timeout in seconds | `300` |
-| `KERNEL_PROFILE_NAME` | Browser profile name for persistent cookies/logins (created if it doesn't exist) | (none) |
-
-When enabled, agent-browser connects to a Kernel cloud session instead of launching a local browser. All commands work identically.
-
-**Profile Persistence:** When `KERNEL_PROFILE_NAME` is set, the profile will be created if it doesn't already exist. Cookies, logins, and session data are automatically saved back to the profile when the browser session ends, making them available for future sessions.
-
-Get your API key from the [Kernel Dashboard](https://dashboard.onkernel.com).
+- Keep `upstream-main` for clean upstream sync
+- Merge upstream into short-lived sync branches, then PR into `main`
+- Recommended release format: `<upstream>-fork.<fork>` (example: `0.14.0-fork.3`)
+- Use npm Trusted Publishing (OIDC)
 
 ## License